Check your backups against the 3-2-1-1-0 rule
You want to know whether your backup copies would survive ransomware that goes after backups first.
- You get
- A pass or fail for each part of the rule, the attack each gap leaves open, and the cheapest fix.
- Works in
- ChatGPT
- Claude
- Copilot
- Gemini
Fill in the blanks
A few words each is enough. Leave a blank empty and the assistant will ask you or assume.
Describe, don't paste: no CUI, personal data, hostnames, IP addresses or credentials. What you type stays on this page until you copy it or open it in an assistant.
Your prompt0 of 6 filled
Assess our backup design against the 3-2-1-1-0 rule: 3 copies of the data, on 2 different types of storage, 1 offsite, 1 immutable or air-gapped, and 0 errors in verified restores. Our current setup: - Production data: [Where it lives and rough size] - Backup copy 1: [Where, and what software] - Backup copy 2: [Where, or "none"] - Immutability or air gap: [What, or "none"] - Restore testing: [How often, and what gets tested] - Admin access to backups: [Same accounts as production? MFA?] Score each of the five parts as met or not met. Treat a copy that can be deleted with the same admin accounts as production as not isolated. Explain the attack each missing part leaves open, and recommend the cheapest change that closes each gap. Finish with the single change that reduces the most risk. Some details above are still in square brackets. Ask me for them before you answer, rather than guessing.
Before you paste
Read what comes back as a first draft. Check every claim about your own environment and any regulation it cites.
Then check the answer
The 3-2-1-1-0 guide
Immutable and air-gapped copies, explained
More planning prompts
All 28 prompts- Set RTO and RPO tiers for your systemsLeadership wants recovery targets and you need a defensible way to set them system by system.
- Plan and record a restore testYou need to prove backups actually restore, for yourself and for an assessor or insurer, not just that the jobs succeeded.
- Review your disaster recovery plan like an auditorYou have a DR plan, but it hasn't been tested or read critically in a while.
- Work out what Microsoft 365 doesn't back up for youSomeone asked "doesn't Microsoft back that up?" and you need a clear answer for your tenant.
- Check whether your AI data can be recoveredYour team uses AI tools, vector databases or agents, and no one has asked what happens if that data is lost or poisoned.
Want a person to check the answer?
AI gets you a first draft. A KELYN engineer can tell you whether it would hold up in an assessment or a real recovery.